IT Risk Analyst

• Good knowledge of IT Risk and cybersecurity frameworks (ISO27k, NIST, DORA).
• Knowledge of IT Risk analysis
• GRC tools (ServiceNow)
• Minimum 2 years of proven working experience in IT Risk management and cybersecurity activities.
• Knowledge of the management of IT Risk of the third-party providers.
• Knowledge of Application security.
• Open and team-oriented profile rather than highly technical.
• Autonomy and time management.

• Advanced student/graduate of a computer science related career (nice to have).
• French: Nice to have level B1 or higher, but a plus.
• Knowledge of banking and banking processes will be a plus.
• Experience in Agile methodologies (Scrum, Kanban).
• Ability to understand, explain, and support solution evolutions.
• Ability to meet objectives / Result orientation.
• With attention to detail/ Rigorous.
• Collaboration and teamwork.

• English: B2 or higher (oral and written) - mandatory.

Benefits:
* Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
* Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).
* Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.
* Flexible compensation plan
* Hybrid telecommuting model (50%)
* 31 vacation days.

Diversity and Inclusion commitment

BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.

For the two PF GSL Shared Service Centers (SSCs), SE.T (Madrid) and CE.T (Bucharest), you will have the following responsibilities:

• Identify the potential IT & Cyber risks inherent to the activity.
  • Identify and monitor the ICT risks in the organization and in the services delivered by the SSCs
  • Assess risks by calculating probability of occurrence and the IT and business impacts and identify and take into account the mitigation measures (control plans, monitoring programme of the IT & Cyber risk management system, etc.)
  • Support initiatives to ensure IT risks are taken into account and addressed.
• Contribute to the various IT & Cyber risk assessments and control exercises and reviews.
• Ensure reporting of IT & Cyber risk management providing a consolidated view of IT & Cyber risks and producing reports and indicators on IT risks.
• Ensure the correct application of the Third Party and Technology Risk management procedures:
  • Qualify any new or renewal of an externalized service
  • Ensure the proper governance of the third party ICT Risks.
  • Inclusion and negotiation of the security contractual clauses
  • Follow-up of the remediation activities.
  • Take part of the different committee with the provider and lead internal committee